ja99 Privacy Policy — How We Handle Your Personal Data

ja99 ("we", "us", "our") operates the online betting and casino platform accessible at ja99.io (the "Platform"). This Privacy Policy sets out the basis on which we collect, process, store, and share personal data relating to individuals who register accounts on or otherwise interact with the Platform, including players based in Bangladesh.

We are committed to protecting your privacy and handling your personal data with transparency, integrity, and in accordance with applicable data protection principles. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform as a whole.

This Privacy Policy applies to all personal data collected in connection with your use of the Platform, regardless of the device or method by which you access it — including desktop browsers, mobile browsers, and any future ja99 mobile applications.

ja99 collects the following categories of personal data from players and Platform visitors. The specific data collected in any instance depends on the nature of your interaction with the Platform:

Where ja99 is required by law or by responsible gaming obligations to collect certain personal data and you decline to provide it, we may be unable to open or maintain your account, process transactions, or provide access to specific Platform features.

ja99 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide voluntarily when registering an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or responding to a promotion or survey.
• Automated technical collection: Technical and usage data collected automatically as you interact with the Platform, including IP addresses, session logs, and device information, collected via server logs, cookies, and analytics software.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. Note that ja99 does not store your full mobile wallet PINs or credentials — these are handled entirely by the respective payment providers.
• Identity verification partners: Confirmation of identity document authenticity from third-party KYC verification services where applicable to process your account verification request.
• Fraud prevention services: Risk signals and device fingerprint data from third-party fraud detection tools used to protect the Platform and its players from unauthorized access and fraudulent activity.

ja99 uses personal data collected from players for the following clearly defined purposes. We do not use personal data for any purpose not described in this Privacy Policy:

• Account creation and management: To register your player account, verify your identity, maintain your account settings, and keep your account in good standing on the Platform.
• Service delivery: To provide you with access to sports betting markets (including cricket BPL, IPL, T20 World Cup, and Bangladesh Tigers matches), live casino games, slot titles, and all other features of the Platform.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain an accurate record of all financial transactions associated with your account.
• Regulatory compliance and KYC: To fulfil Know Your Customer (KYC) and anti-money laundering (AML) obligations, including identity verification, transaction monitoring, and reporting to relevant authorities where legally required.
• Responsible gaming: To monitor gameplay patterns and apply responsible gaming tools — including deposit limits, loss limits, cooling-off periods, and self-exclusion — where you request them or where ja99 identifies indicators of problem gambling behavior.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, bonus abuse, and other prohibited conduct outlined in our Terms & Conditions.
• Customer support: To respond to your support enquiries, process complaints, and improve the quality of our support service based on interaction records.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have provided explicit opt-in consent. You may withdraw this consent at any time without affecting your access to the Platform.
• Platform improvement: To analyse aggregated usage data and identify opportunities to improve Platform performance, game selection, and overall player experience in Bangladesh.

ja99 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between ja99 and the player — specifically, to create and operate your account, process bets and payments, and deliver Platform services.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including KYC/AML obligations, responsible gaming mandates, and lawful requests from law enforcement authorities.
• Legitimate interests: Processing is necessary for ja99's legitimate interests in operating a safe, secure, and commercially viable Platform — including fraud prevention, security monitoring, and Platform analytics — provided those interests are not overridden by your privacy rights.
• Consent: Where processing is not required by contract or law, ja99 will seek your explicit consent — for example, before sending marketing communications or placing non-essential cookies on your device. You may withdraw consent at any time.

ja99 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and data security standards.
• Identity verification providers: Third-party KYC and document verification services receive your identity document data solely for the purpose of confirming your eligibility to hold a ja99 account.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session and gameplay data necessary to deliver their game content and resolve technical disputes.
• Fraud prevention and security services: Third-party fraud detection providers may receive technical data (IP address, device fingerprint, session metadata) for the purpose of identifying and preventing fraudulent activity on the Platform.
• Legal and regulatory authorities: ja99 will disclose personal data to law enforcement, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where necessary to protect the legal rights, safety, or property of ja99 or its players.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ja99's assets, your personal data may be transferred to the successor entity, provided that the successor agrees to treat your data in accordance with a privacy policy that is materially consistent with this one.

ja99 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, enhance your experience, and support analytics and security monitoring. A cookie is a small text file placed on your device when you visit a website. Cookies cannot execute programs or deliver viruses to your device.

ja99 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences — such as language settings, account display preferences, and responsible gaming limits — so that you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps ja99 identify areas for improvement. Analytics data is not linked to individually identifiable player profiles.
• Security and fraud detection cookies: Used to identify suspicious device activity, detect automated access attempts, and protect the integrity of the Platform against bots and fraudulent sessions.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to refuse some or all cookies, or to delete cookies already stored on your device. Please note that disabling strictly necessary cookies will affect your ability to log in and use the Platform normally.

ja99 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the ja99 Platform is encrypted using industry-standard SSL/TLS protocols. Our SSL certificate is verified and current.
• Encrypted storage: Personal data and financial records stored in ja99's systems are encrypted at rest using AES-256 encryption or equivalent standards.
• Access controls: Access to personal data is restricted to authorised ja99 personnel who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Password security: Player account passwords are stored as one-way cryptographic hashes. ja99 staff cannot read your plain-text password. If you forget your password, a reset flow is provided — your original password cannot be retrieved.
• Regular security audits: ja99 conducts periodic security assessments of its Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: ja99 maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify affected players and relevant authorities in a timely manner in accordance with applicable legal requirements.

ja99 retains personal data only for as long as is necessary to fulfil the specific purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention principles apply:

• Active accounts: Personal data associated with an active ja99 account is retained for the full duration of the account's active status, plus a minimum post-closure retention period of five (5) years to satisfy anti-money laundering and record-keeping obligations.
• Closed accounts: Following account closure — whether initiated by the player or by ja99 — personal data is retained for a minimum of five (5) years to comply with legal obligations, resolve outstanding disputes, and maintain fraud prevention records.
• Transaction records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven (7) years to comply with financial record-keeping obligations.
• Support communications: Records of customer support interactions are retained for a period of three (3) years from the date of the interaction, or longer where the interaction relates to an unresolved complaint or legal dispute.
• Marketing data: Where you have consented to receive marketing communications, your contact details and marketing preferences are retained until you withdraw consent. Following withdrawal of consent, your details are removed from active marketing lists promptly.
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely for Platform improvement purposes, as it cannot be used to identify individual players.

When personal data reaches the end of its applicable retention period, it is securely deleted from ja99's systems or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

As a registered ja99 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 13 of this Privacy Policy.

• Right of access: You have the right to request a copy of the personal data that ja99 holds about you. We will provide this information within a reasonable timeframe and at no charge for the first request.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by ja99 be corrected or updated. You may also update certain details directly via your account settings on the Platform.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where the data has been unlawfully processed. Note that this right may be limited where ja99 is required to retain data by law.
• Right to restriction of processing: You have the right to request that ja99 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to object: You have the right to object to processing based on ja99's legitimate interests, including profiling, where you believe your interests or fundamental rights outweigh those of ja99.

The ja99 Platform is strictly intended for adults aged 21 years and above. ja99 does not knowingly collect or process personal data relating to individuals under the age of 21. The Platform is not directed at, marketed to, or designed for use by minors.

During the account registration process, all applicants are required to confirm their date of birth and agree that they are at least 21 years of age. Where ja99 has reason to believe that an account has been registered by or is being used by a person under 21 years of age, the account will be immediately suspended pending age verification. If age verification confirms that the account holder is under 21, the account will be permanently closed, any pending bets will be voided, and any funds in the account wallet will be handled in accordance with applicable law.

If you are a parent or guardian and you have reason to believe that a minor in your care has registered an account on the ja99 Platform or has provided personal data to ja99, please contact our support team immediately at support at ja99.io so that the matter can be investigated and the account closed without delay.

ja99 reserves the right to update, revise, or replace this Privacy Policy at any time. Where material changes are made to the way we collect, use, or share personal data, we will provide prominent notice on the Platform prior to the changes taking effect, and will update the "Last Updated" date displayed in the hero section of this page.

For minor or administrative changes — such as correcting typographical errors or clarifying existing language without changing the substance of the policy — we may update the policy without separately notifying players, although the revision date will always be updated.

Your continued use of the ja99 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised policy. We therefore recommend reviewing this Privacy Policy periodically so that you remain informed of how your personal data is being handled. If you object to any changes to this Privacy Policy, you must cease using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ja99 handles your personal data, please contact our dedicated support team. ja99 is committed to resolving all privacy-related enquiries promptly and transparently.

Our support team is available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (BST, UTC+6), and is equipped to assist players across all cities and regions of Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

Email: support at ja99.io

Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

Please include your registered account username or email address in any privacy-related enquiry so that we can locate your account and respond accurately. We aim to acknowledge all privacy enquiries within 24 hours and to resolve them fully within 30 days of receipt.